Added Content-Security-Policy to the default preview HTML template
Merge pull request #2024 from wordpress-mobile/issue/editor-73-disable-javascript-in-preview

Added Content-Security-Policy to the default preview HTML template